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The purpose of this Annexe is to relate the organisation KONA 
1, described in great detail in TICOM/l 1 9b-f , to the German Army 
Slgint. Service as a whole. This involves, particularly in Section 
I-General, drawing csn evidence from all sources, including ULTRA, 
not merely from the Interrogations at Revin. 
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German A rmy ( g as tc-rn _Pront ) 

S igint organisation, and Metho d 

Ex_aijap_lo_:_ KO NA 1 . 

I - Ge neral . 

A. 'Hie Posit ion of KON A 1 w it Ain the German Arm;/ 

Sigint S e j ^ijae ” 

A Kommande ur der Nachr. Auflcl, (called K dr,, d . Na 
in the West, KOITA in the East, but it will be convenient to 
use KONA throughout this report) is the normal Sigint. 
complement of a German Army Group, 

There were, from 1942, continuously four KONA * s deployed 
against the Russians , but never mo re than three KONA ' s against 
tin Western Allies, 

The priority given to Russian cover is also evident from 
the d i re c t s ubo r di na t i o n of the Ea s t o rn KONA ' s to Gon, d, NA. 

The Western Si gin t. units were under command, latterly, of a 
so-called "Higher" Kommandour, with C,-in-C. West. Similarly 
part of Gruppo IV (Western cyphers) of Gon.d.NA. was lodged 
with G.-in-C, West, not with the GHQ party. 

The final order of battle was, 


GKIl/Chof. HNW. (Director of Ar^iy Signals, Gon, PRAUN) . 



Comment:- KONA NORTH (Army Group North) had low establishment, 

B. Sijiint . Or ganisatio n East a nd Wostj^ . S imilarities , 
Di_f for c nees . 

"The organisation of a Sigint Service is always a 
faithful reflection of the wireless behaviour of the enemy. 11 
This statement has been made by many prisoners; it must be in 
one of their handbooks. 
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The differences come out in methods of evaluation. Army Sigint. 
in the ^ast was forced to employ all means (cryptanalysis, traffic 
analysis, D/F 1 ) to fulfil its task. It was bound, if it intended to say 
anything at all, to report on the basis of evidence which Western or 
Southern Front units would not readily have adduced, except as second 
line evidence substantiating deductions from P/L or broken cipher signals* 

The Russian picture was on all fronts uniformly obsdure . 

Major Hertzer, who has had experience of both the Western and the 
Eastern "enemy", is still "astounded at the amount of P /L allowed by the 
Anglo-American s" and evidently looks back on interception in Italy with 
nostalgia. 

A contrast between East and West, favourable to Western standards: 
German Army Sigint to the best of our knowledge, did hot in th- 'West 
penetrate nor in any way --^cploit Anglo- American high grade military 
ciphers. It was evidently and low and medium grads, or nothing. Not 
even the traffic analysts appear to have speculated on high grade Army 
traffics. In the East high grade (5 figure) traffics contained vulnerable 
elements. The Germans rank the "characteristics" of 5 figure traffics 
(themselves generally unreadable) amongst the most important sources of 
information. Siging. units in the East were consequently more fully a fere 
of the total wireless picture* 

0 . Germ an Si gint. In the Ea st . Cooperatio n of t he specialists. 

The Germans designed their Army Sigint. units for use in relatively 
forward areas. As far forward as Corps, there was a Sigint. Platoon, not 
merely intercepting and D/.Ping, but evaluating intercepts for Corps IC. 

Jn the opinion of Hptm. ROESSLER, Chifif Evaluator with KONA 1, the 
effort was mistaken. i here was no need for the lateral passing of Si.i3nt* 
results at Corps, nor even at Army level's This led to Sispersal of strength 
and, during retreats, to loss of personnel and increased difficulties for 
the remainder. He thinks that Corps and Armies would have been better 
served by a centralised Sigint organisation at Army Grpup level (with 
better reporting networks} it- See SJ bottom 0 three 
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ROESSLER's opinion v/ould prpbably not be sheared by Chief Evaluators 
from tYastern or Southern Fronts: it is the product particularly of Eastern 
Front experience. It calls for more detailed consideration. ■ 


Russian signals yielded, particularly in the later stages of the 
War,_ if at all, only to a combined assault by all specialists. The German 

kn ov Russian order of bat tie. The 
' sly ' 



traffic analysis). 

necessary irbm the first stage, to 
establish the network picture and identify the subscribers. The last stage,: 
f usion{Endauswertung) still took into consideration intercept operator's 
comments. (The intercept operator, conversely 1 ', knew what units he was 
covering; or knew that they had still to be identified.) 


For effective 'exploitation of Russian signals endless logging of 
minutiae by the various specialist branches is apparently essential, on 
the principle that what is today unimportant may some day be compromising 
evidence. One can sympathise with the Gbergefreiter threatened with 
court-martial for having intercepted a time -of- origin as a Chi- number. 

Fusion, in an Eastern Front Sigint. unit, was therefore the final . 
scrutiny of all evidence, on the basis of which alone military intelligence 
could be promulgated. The task of the Chief Evaluator was or#* of consider- 
able difficulty and responsibility. Hauptmann Roessler's report (TICOV/jL 
-1?b, Report Wo. 7)is, despite its pomposity, worth careful attention. 

See also Reports Wo. 12-14 stJE for Intelligence Bulletins based almost 
exclusively on traffic analysis. 


All cross references are to reports in TIC0W/i-l9b 


Sf KONa 1 for instance had five Companies each trying to work on the nets, 
the enciphered signals and the order of battle of, roughly, an Arrry sector. 
WAAS could not bring its specialists to boar on these problems until the 
Companies had had their u craak rt ai, them. (The Companies had to put in 
16 typists hours a day merely to get their material and evaluations to 
NAAS. 
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D. B. 0 I 0 of Si/zinta. ei thin yorinan, has torn jF r onj b Intol lityonoo . 

The scope of German Gigint o.. 'the- _,f. stern Front was 
always circumscribed, Though one of the ;ost important 
sources of ...ill tar;- intelligent; it was never regarded, as the 
source. High- grade Rua s i an c y phe rs wore so curt. 

iiigint therefore concent fa tod on those problems which it 
alone wa s doei uc d b y the G-e naan Goa, '.and ab 1 e to solve; 

(1) Identification of Russian concentrations; 

(2) Location of Tank armies, ‘Thru at armies, 
mechanised Corps, etc., i.c., the Russian mobile, 
s t rate ■ ic re serve. 


Those questions c-ould not be answered by Russian prisoners, 
Russian prisoners were usually infantrymen; the Germans wore 
prepared to ignore the infant r; , (lia’aptmann ROnoGLRR docs not 

refer to agents as sources; it is probable that the Gormans 
did not place great reliance on the eastern Front agents, } 

KOIL* 1 devoted one entire Sigint co.-pany to the cover of 
"unidentified traffics", Bnpuriwice a owed that unidentified 
traffics could include th., nets of mobile- formations again on 
the air afte. a period of ’wireless silence; they could include 
the traffics of new formations. It was mainly by work on 
unidentified traffics that the solution of problems (1) and (2) 
could be achieved. 

R0BG3LBR claims that KOHL 1 was generally successful. 
Concentrations won, recognised, earnings wore given of 
intended Russian thrusts. In addition, (ho man) Ic of .,rmy 
Group was provided by gigint with both an overall picture of 
Russian a t r ■_ ng th and Go t a i lo d o r dc r of battle, 

R0333LBR adds that warnings were given "in good time". 

This is vague. That warnings were given we may, also on the 
basis of evidence fro.', other sources; accept. But references 
by Sigint prisoners to official acknowledgement of specific 
warnings suggest that the warnings were not generally adoq.ua to. 
It is difficult to see how oi^int could have improved ita 
warning service. Without high- grade decodes, gigint was, as 
far a, s intentions and concentrations aro concerned, almost 
entirely dependent on day-to-day traffic analysis. It was 
lost during effective wireless silences. 

hddondum; prisoners referred in passing to tank- 
strength returns, railway movement reports, etc., but did not 
speak of systematic study of their contents; they wore 
apparently read only sporadically. 
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II - 0 . . *jgan i s at I on of KONA, j _ - De tails , 

A. Thc_ or xtor of battle of t he uiiit s of KONA 1 , do scribed 
in Report W.1” works' ou't "as 'Toll owe f- " 


Gen, d. HA. 



r 

; ( 


KONA 1 

(other KQNA's) 

i 

1 i 

1RJU33 ( IT) 

ito 10 

ITAAS 


r 

Abt, 3 


A t , 4 


1 


1 


BUNOLD (N) 623 (P) 953 (N) 617 (E 1 ) 954 (N) 



(N) = Close Range (3igint Coy. / . Note that 953 (IT) was 
seconded to the West, only a nucleus of Russian 
specialists remaining to fori': Company 33N0LD. 

(P) = Long Range (3igint Coy.). 

KONA 1 - Tile Bigint He adq.ua r ters attached to Army Group 
0 e-n t re ( £ o rtvm r ly called H or th Ukr aine ) . 


Coalmen ts - prisoners' reports (TICCi.i/l - 19b) have little 
on the* "two TjFtei lunge n (3 and 4) and the Short Range Companies 
BLNOLD, PEA US S and 954. 

.-j i r-,int Abt eilungon - These were , in all areas, merely 
coordinating staffs for Sigint at ,.rmy level, KBR1ALR 
explained that the , v btoilung Kommandoure wore generally elderly 
Haut pic Lite whose main task was to go the round of Sigint and 
Army units, collecting views and making minor adjustments in the 
deployment of forward intercept parties, Qberst BOBThBL 
(Gen*d.NA. ) states elsewhere that the ..btoilungen, introduced at 
the beginning of 1944, did not pay dividends. 

Close Range sigi nt Compani es operated, as HLRTCAR says, by 
plaeoons" one" platoon with each* Corps, Company Headquarters 
party at Army boin^ responsible for organisation and reporting 
(to ,uw and NAAS) The platoons exploited forward R/T 
traffics. (They had 12 R/T intercept, to only 2-3 Morse 
intercept operators, a small evaluation party of 3 and close 
range D/P operators.) The Short Range Companies arc of 
interest to us only insofar as their reports were utilised by 
NrAlS , 

(HBRTZER speaks of "Blitz iff orcr 11 in the forward companies. 
Those were presumably decoders, not cryptanalysts, supplied 


:: 


KONA. 1 _ i n_ o per at i on, The to 1 loyi n p; d5-» pro m 

roproa ont s mo r o" c lo ar3 . y the t ac t i c al lay-out 
of KONA. 1, It ignores the Abteilungen (see 
previous page); it groups the Long Range 
Companies arid Fes to 10 near to NAAS . , at Army 
Group level and shows the Short Range 
Companies as Aruiy level; this was tho final 
arrangement , 



The relative independence of the various Long Lange 
Companies was, in the final close grouping, anomalous. It 
was a remnant of earlier organisation, outlined in tho next 
paragraph . 


The o-called ‘'Fixed 11 units were pre-war intercept 
stations. Those in the East were semi-motorised from the 
beginning of the Eastern campaign; they re tn inod .their 
traditional des ignation , Feste 10 is therefore merely one 
of KONA , 1 * s Long Range Sigint .Companies , Its normal 
location would be in the Array Group L, of C. area. The 
Long Range Companies were designed to operate in full 
Company strength (not, like the Close Range Companies, by 
platoons) for j ond near to, the KQ. of an Army. These 
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0. Division of labour . The prisoners* reports distinguish 
hroadly between the work of 

Close Range Company, 

Long Range Company, 

NAAS. 

Differences between the individual companies are 
indeed merely differences of cover assignment. 

The functions of NAAS we re 

(1) to check and coordinate the reports (technical 
and tactical) 

fa) of the Companies BE MOLD, PREUS3 and 954, 

(b) of the Companies 617,623 and Peste 10. 

(2) to check and carry forward the Evaluation work 
of the Companies , by bringing to bear : 
various staffs of experts and more ample 
reference resources, 

(3) to report 

fa) to Army Group I c — military intelligence 
(b; to OKH/Gen,d,NA — Sigint. material and 
deductions 

f4) to conduct research 

(5) to control cover 

(6) to brief the Companies, 

At both the lower and the higher levels provision was 
made for efficient reporting, either laterally to 
field formations or back through Sigint, channels to 
higher Sigint, authorities, "Fast" items went out 
currently in "Advance Reports" ( Vorau s or Sofort- 
meldungen ) , "slow" items in "Day Reports". A good deal 
of material went into the unit records (card indexes) 
only. Lower Sigint. echelons were given a good moasure 
of responsibility and expected to show initiative: 

NAAS. had plenty on its hands, and suitably reprimanded 
forward units who allowed what should have been a "flash" 
to become involved in the machine ry of routine back- 
r- porting, (See Report No. 7 for a Sitrep, by NAAS., 
including references to already circulated "Advance 
Reports" . ) 

As Hauptmann ROESSLER says, one could suggest reforms. 
The main subject discussed at KONA.I's business meetings 
was communications, the problem of integrating, by means 
of a perfect reporting system, the various parts of 
the imperfect organisation. He has not the perspective 
to see that he disagrees with the basic principle of 
German Army Sigint. organisation : namely that it’should 
bo based on the Order of Battle of the Qcr. an Field ;,rry. 
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U . tout ing. of, reports. 

This Subject is not covex*<ad ir, nny special report in 
TIC Of;!/ I - 19b, but many refer to it in passing. The diagram 
on the & c ;d; page may ba helpful, if first studied in 
conjunction with the following text, which is largely 
repetition of the last sections. 

The shallow rectangle top of diagram - lists the 
traffics to be intercepted. Tho platoons of close Range 
C o mp an i e s PRE US 3 , BEHOLD an d 954 intercept the f o r w ar d R/T 
end morse traffics of formations in the line and exploit them 
for 'flashes' to the Corps to which the platoons are accredited. 
The Evaluation sections of each of the Comp allies fuse the 
platoon reports for Army and report back to HAAS (party for 
technical and tactical analysis of known traffics). 

Identified '.V/T traffics of Higher HQs., Armies, Corps 
and committed mobile formations of the five Russian Fronts 
are shared between Long Range Companies 617 and 623. 
Unidentified W/T nets are covered by Rests 10 (also L.K,W.D. 
nets and the nets of the strategic mobile reserve on request). 
All these traffics arc studied, a3 fully as resources permit, 
at company level, (In the old days they would have been 
exploited for Army), Reports are submitted to HAAS,, as 
indicated: in network reports (2x daily), important signals 

(currently in ’Advance Reports*), unimportant signals (daily). 
The section at HAAS for technical and tactical analysis 
combines the findings of these reports with the harvest from 
the forward companies and reports to Army Group, An arrow 
indicates that the whole intake (whether exploited or not) 
is passed down to the specialist branches of HAAS for further 
'squeeze', research and subsequent exploitation of for filing 
only. 

The following items pass, unprocessed, right through 
KOLA 1 to Gen d. HA, 

1) the encodes of 5-figure traffics, including N.K.W.D, 

2) H.K.T.D. traffics which fall outside the area of ICOiTA 1, 

The '5-figure offers' prepared by Feste 10 are intended 
for circulation by Gen. d. HA, to other KORAS, These 'offers' 
list the 'characteristics' of unidentified 5-figure traffics; 
they constitute an invitation to other KOLAS to check the 
characteristics (Chi-number etc,) against their 5-figure 
card indexes and report back, or themselves exploit, findings. 


Authority 


1 White Russian 

, 1.2.3. and 4 Ukrainian Fronts 

Forward R/T 

Identified W/T 

Unidentified W/T 

and Morse of 

of Highe r HQs 

(incl. mobile reserve 

formations in 

Armies, Corps 

and new units) 

line 

etc , Committed 



mobile formations 



N. K. W. 

D. 


I 



[ Army Grouij 


Technical & 
tactical 
Analysis of 
known traffics 


, 3 Eval, 


FREUSE~ I ~3ENQLD I 9 54 o m p~ a n~ i e' s ' 61 7 /&23~anrTFeste 10 


Intercept about 80 

) 

D/P about 50 

) Each Coy. 

Evaluation about 30 

) Total C.250 

Cryptanalysis about 

) 

i + 

) 


Network Evaluation 
Contents Evaluation 


D/P Evaluation 
ryptanalysis 


| Card indexes 

life w t raff ic s ( Fe 1 d ) 


5 Pig, character- 
istic s 
Traffic analysis 
M.K.W.D. 

Fusion 


2, 3,4 Fig., 


5 Pig, offers 


(Fes te 10} 


jfj rrsi Total strength 6 4-260 


(Prom Long Range Companies; 

1 (network reports (2x daily) 

( important signals (currently ^ 
(unimportant " (daily) 


Traffic analysis 

D/P Evaluation 

\ ! 

,Card Indexes 

Personnel, Units, Blocknots , ; 

Keys, call-signs, cover-names 
coordinates 

N.K.W.D. 

Air Force 



Cryptanalysis 

(60 men) 


2- Pig, 

3- Pig. 

4- Pig . 

New developments 
(Analysis 
(Book-building 


N.K.W.D. 

P/L scrutiny 
■0 rgani3ation 


G.A.F.Sigint, 


[Other K0 NAs7nAAS 




to Gen, d. NA, fcnpro cessed, 
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E Card Indexes, * 

.Report if a, 8 treats the card index sy«to w of ttaas. in 
consider able detail* Only the coordinates index is ln&d«Qiiflt.«i;r 
covered. Interrogators eat abn ished that the only coordinates 
involved are map coordinates. They are worth indexing not 
only as a means of breaking map reference systems, but from 
the following considerations: 

Secret methods of map reference are infinitely varied; 
Coordinates are, moreover generally given en clair. The 
method used by a given formation may, whether understood 
or not, enable the Sigint service to keep track of the 
formation. 


The card index of Russian ciphers (key card index), to 
which Report jfo, 24 also refers, is arranged according to 
German designations of Russian keys, i.e, is of no great 
interest. The German system of key designation is perhaps 
Wurth mentioning: it includes a self-evident description of 


the 


code pius an allotted number ; 
e.g, R4ZC 1800: russischar 4'~Zahlen Code 1800. 

As the Germans claim to have coped with thousands of keys, 
a self-explanatory, rather than arbitrary, designation was 
obviously an advantage for record keepers. 


The card indexes at Company level are as complete as 
Company cov^r assignment allows but naturally less 
comprehensive than those of HAAS. 


